Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
File:                     4FEB85108E86A307A90034950C74C7A6630768F6.mft (raw, json)
Hash identifier:          LPvrjY+DRJp2BDy0fK9zHEoGdyVLZ4LT+05MaRYHuSo=
Subject key identifier:   32:15:FE:23:1A:7D:28:7C:EF:D3:E0:1F:2F:D8:7E:C8:51:AA:F2:A2
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Certificate issuer:       /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial:       52CC56C2AFB5867A07731725C7339F30E23715C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
Manifest number:          028F
Signing time:             Fri 08 Aug 2025 08:00:39 +0000
Manifest this update:     Fri 08 Aug 2025 07:55:39 +0000
Manifest next update:     Sat 09 Aug 2025 11:37:39 +0000
Files and hashes:         1: 3139312e352e37312e302f32342d3234203d3e203631393031.roa (hash: RAXQXEpUtTQmLd0C5JGvL8C3AqxlW0I6h49fNKUPJts=)
                          2: 3137302e3235342e35322e302f32332d3234203d3e203631393031.roa (hash: 1aiUBIBEVZ70l7NdNYgTC7fLaqxFUqe1VBSdTyielnk=)
                          3: 4FEB85108E86A307A90034950C74C7A6630768F6.crl (hash: o4U3qaviUi04KWbQrZLGPCiu4R932RwNZBAbLcw1TWs=)
                          4: 3137302e3235342e35322e302f32322d3234203d3e203631393031.roa (hash: c8SEtxltbzxTD6mecjZaYNQoNWjIeWjJiy4z7fCuuCg=)
                          5: 323830343a313337303a3a2f33322d3438203d3e203631393031.roa (hash: YJyXY86R5T1PqUhzBw4EcR5VyRFsFodVqAl6n4h/KO4=)
                          6: 3137302e3235342e35342e302f32332d3234203d3e203631393031.roa (hash: RYPdPuBNFebz9NMxkrB1ByPS9CO5QwI2mjoViQhhiVY=)
                          7: 3139312e352e36342e302f32322d3234203d3e203631393031.roa (hash: XfFwaqq2TkerGurWaQE+c6zy1ESLbMxRVc9Us4gZVac=)
                          8: 3137302e3235342e35342e302f32342d3234203d3e203631393031.roa (hash: 4GvLE5HtCjR0jn1akFfJAIZff70at4htkUrqkZgFpPc=)
                          9: 3139312e352e36342e302f32312d3234203d3e203631393031.roa (hash: Y8OjZV5TVHa10c9w7wuxHCZhKAqGEebZN23m5kZNHS4=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
                          rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 11:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:cc:56:c2:af:b5:86:7a:07:73:17:25:c7:33:9f:30:e2:37:15:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Validity
            Not Before: Aug  8 07:55:39 2025 GMT
            Not After : Aug  9 11:37:39 2025 GMT
        Subject: CN=3215FE231A7D287CEFD3E01F2FD87EC851AAF2A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b5:13:a3:70:91:06:18:03:0b:43:7c:0c:56:
                    61:b4:99:50:e2:f2:af:da:36:ba:76:d1:9e:90:1e:
                    cb:d0:58:c7:fd:ef:c9:2d:a8:ed:28:00:83:75:c1:
                    22:16:c0:a5:fe:6d:43:7b:9b:6f:07:71:0f:21:43:
                    55:05:57:87:c9:73:8d:97:cc:63:23:02:4b:2b:44:
                    ab:37:a5:43:d4:1a:4f:e2:62:f3:c6:f9:d9:da:9b:
                    22:27:9a:d4:d8:49:4b:9f:4c:f3:71:4d:0f:e6:94:
                    c8:62:0c:5b:1e:97:37:69:b8:41:ac:95:dc:ef:5f:
                    92:1a:87:b0:8c:b6:03:37:50:39:1d:2d:51:f8:78:
                    a0:37:f5:ea:6d:bc:8d:45:c0:07:23:28:67:e8:e8:
                    35:6c:61:38:ba:74:a9:72:9d:d4:f8:ec:27:cf:9e:
                    f6:c8:b1:55:dc:8c:77:07:ae:62:40:53:d4:3e:b8:
                    8d:36:54:72:7a:ac:af:07:f8:b9:26:fb:ca:42:0d:
                    af:aa:d2:ad:58:d4:77:a4:2c:62:fa:db:db:27:82:
                    a4:21:55:7e:6a:ce:f8:ca:b8:80:d5:c6:46:9c:db:
                    f8:87:ec:98:2d:fd:01:19:23:2c:69:12:a4:45:99:
                    8d:f4:c7:1b:be:1c:96:29:41:18:62:a9:46:bb:58:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:FE:23:1A:7D:28:7C:EF:D3:E0:1F:2F:D8:7E:C8:51:AA:F2:A2
            X509v3 Authority Key Identifier:
                keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:77:79:2f:df:d3:f6:65:51:b9:0a:54:6c:7a:98:18:50:
         76:af:37:88:59:9e:9b:c6:e3:eb:db:5d:5c:2b:08:b2:a2:23:
         c5:46:92:8e:33:ca:f8:68:ee:9e:91:80:22:3e:93:7a:ff:89:
         10:8b:f3:ef:a8:ca:11:e9:aa:d8:d0:95:ee:08:c2:1e:6f:79:
         30:6a:71:2f:3c:3b:ab:a6:42:7c:ef:ff:53:89:37:5c:01:be:
         51:24:5e:21:e1:ba:ec:8d:61:49:52:4b:57:90:76:b6:aa:6d:
         25:95:52:d0:eb:88:54:6b:74:54:de:6f:3a:db:19:76:dd:92:
         79:be:d5:64:b3:92:25:2a:63:13:ac:e7:79:a2:5e:b3:b9:bf:
         44:de:dc:66:ca:ce:fb:05:d4:aa:54:78:e7:de:37:7a:4b:87:
         1c:d1:34:3d:fc:12:d4:91:60:d2:ab:9d:cc:58:92:34:be:97:
         4f:61:c1:22:49:98:ba:c7:f3:8b:d8:9d:a9:4a:6a:13:84:35:
         71:c5:e7:1f:e1:34:2a:83:a8:bc:2a:bb:05:bb:31:97:78:c7:
         20:10:b8:74:03:c8:63:29:a1:53:a3:dd:9c:e1:4a:85:e2:93:
         34:40:4d:2b:2c:4b:81:64:b3:29:6d:50:ad:a3:73:1a:fb:0c:
         a4:94:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:17 2025 by rpki-client